Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.




42 posts

Geek
+1 received by user: 4


Topic # 189554 4-Jan-2016 11:44
Send private message

Can anyone using Flip please tell if they are able to ping 8.8.8.8? I cannot.

It is not actually causing any problems (furthermore, DNS requests against 8.8.8.8 work fine), but I am just wondering why would pinging Google DNS be blocked? I can ping it using other internet providers but not Flip. Their support is reluctant to look into it as they do not see it as an issue.

View this topic in a long page with up to 500 replies per page Create new topic
 1 | 2
25684 posts

Uber Geek
+1 received by user: 5438

Moderator
Trusted
Biddle Corp
Subscriber

  Reply # 1460965 4-Jan-2016 11:51
Send private message

I'm pretty sure ICMP is blocked to 8.8.8.8 and 4.4.4.4 and has been for a couple of years.

I can't ping it here in the US right now (in an airport lounge), so can't comfirm conclusively that's the case everywhere as it could just be this connection.


13347 posts

Uber Geek
+1 received by user: 2247

Trusted
Subscriber

  Reply # 1460967 4-Jan-2016 11:59
Send private message

Works on 2degrees fiber.

ping 8.8.8.8

Pinging 8.8.8.8 with 32 bytes of data:
Reply from 8.8.8.8: bytes=32 time=36ms TTL=57
Reply from 8.8.8.8: bytes=32 time=35ms TTL=57
Reply from 8.8.8.8: bytes=32 time=37ms TTL=57
Reply from 8.8.8.8: bytes=32 time=35ms TTL=57

Ping statistics for 8.8.8.8:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 35ms, Maximum = 37ms, Average = 35ms

ping 8.8.4.4

Pinging 8.8.4.4 with 32 bytes of data:
Reply from 8.8.4.4: bytes=32 time=37ms TTL=57
Reply from 8.8.4.4: bytes=32 time=36ms TTL=57
Reply from 8.8.4.4: bytes=32 time=35ms TTL=57
Reply from 8.8.4.4: bytes=32 time=35ms TTL=57

Ping statistics for 8.8.4.4:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 35ms, Maximum = 37ms, Average = 35ms




AWS Certified Solution Architect Professional, Sysop Administrator Associate, and Developer Associate
TOGAF certified enterprise architect
Professional photographer


 
 
 
 


947 posts

Ultimate Geek
+1 received by user: 187


  Reply # 1461007 4-Jan-2016 13:22
One person supports this post
Send private message

I've always assumed 8.8.8.8 and 8.8.4.4 to be globally ping-able (ICMP echo).

Ping statistics for 8.8.8.8:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 40ms, Maximum = 40ms, Average = 40ms

Ping statistics for 8.8.4.4:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 40ms, Maximum = 42ms, Average = 41ms

Assuming you haven't in some way redirected those Google Public DNS server addresses in your own config (many do for the purpose of setting up Chromecast etc.), it could be that your ISP is redirecting DNS lookups to their own servers. For example, if you ping/query whoami.akamai.net what server address does it resolve to?

3388 posts

Uber Geek
+1 received by user: 1806

Trusted
Spark NZ

  Reply # 1461016 4-Jan-2016 13:43
2 people support this post
Send private message

Or, since 8.8.8.8 and 8.8.4.4 redirect to different servers depending on where you are, it seems likely that some are responding to ICMP and some aren't.

Cheers -N






42 posts

Geek
+1 received by user: 4


  Reply # 1461017 4-Jan-2016 13:45
Send private message

it could be that your ISP is redirecting DNS lookups to their own servers. For example, if you ping/query whoami.akamai.net what server address does it resolve to?


dig whoami.akamai.net +short
103.9.40.1

Does that mean Flip is redirecting DNS lookups?

947 posts

Ultimate Geek
+1 received by user: 187


  Reply # 1461025 4-Jan-2016 14:06
Send private message

Greendrake:

dig whoami.akamai.net +short
103.9.40.1

Does that mean Flip is redirecting DNS lookups?
Assuming that query was made against 8.8.8.8 or 8.8.4.4 then yes it's likely.



42 posts

Geek
+1 received by user: 4


  Reply # 1461037 4-Jan-2016 14:37
Send private message

Assuming that query was made against 8.8.8.8 or 8.8.4.4 then yes it's likely.

Making the query explicitly against 8.8.8.8 produces different result:

dig whoami.akamai.net +short
54.184.36.28
dig @8.8.8.8 whoami.akamai.net +short
74.125.80.73


947 posts

Ultimate Geek
+1 received by user: 187


  Reply # 1461038 4-Jan-2016 14:39
Send private message

The DNS resolution behaviour you are seeing may be related to their Safe Mode feature included in their plans. The feature is described on their website as "Safe Mode creates a first line of defence which blocks R16+ and illegal sites according to NZ law." 



42 posts

Geek
+1 received by user: 4


  Reply # 1461039 4-Jan-2016 14:43
Send private message

yitz: The DNS resolution behaviour you are seeing may be related to their Safe Mode feature included in their plans.

Good guess, but I've got that feature turned off in my account settings. As well as any blocking.
Would be nice to hear some comments from Flip guys here.

277 posts

Ultimate Geek
+1 received by user: 152

Trusted

  Reply # 1461068 4-Jan-2016 15:41
3 people support this post
Send private message

Yes, you can't ping 8.8.8.8 & 8.8.4.4 on Flip, if you want to ping test something local you can use "ping.flip.co.nz". Here is why, as I know you guys love to know what's under the hood -
These addresses are redirected to load balanced local DNS clusters. this was done for many reasons including safe mode, global mode (people did not have to block them with Roku for example), BYO routers (prevents the "my YouTube is slow due to my friend helpfully changing the router to 8.8.8.8 as the previous ISP's DNS servers sucked). Yes some purists may get all wound up about this sort of thing, but the bottom line is local DNS servers work far better than remote generic ones as long as they are built properly (and Flip's are). This killed off a whole category of customer issues and has been running very nicely for the last couple of years. If you have Safe Mode turned off there is no blocking whatsoever on DNS or web traffic.

On a side note, there is no longer any P2P control on Flip's plans, that will disappear from the marketing guff in the coming weeks.






3388 posts

Uber Geek
+1 received by user: 1806

Trusted
Spark NZ

  Reply # 1461072 4-Jan-2016 16:04
3 people support this post
Send private message

[eyebrows raised almost off top of forehead!]

Oh, that's interesting.

Cheers - N


4479 posts

Uber Geek
+1 received by user: 1290


  Reply # 1461124 4-Jan-2016 18:54
Send private message

noroad: [snip] If you have Safe Mode turned off there is no blocking whatsoever on DNS or web traffic.



Greendrake:
yitz: The DNS resolution behaviour you are seeing may be related to their Safe Mode feature included in their plans.

Good guess, but I've got that feature turned off in my account settings. As well as any blocking.
Would be nice to hear some comments from Flip guys here.


So if the OP's got all that turned off, what's the issue?



42 posts

Geek
+1 received by user: 4


  Reply # 1461131 4-Jan-2016 19:09
Send private message

 So if the OP's got all that turned off, what's the issue?

My understanding is that, as noroad said:
These addresses are redirected to load balanced local DNS clusters. this was done for many reasons including safe mode, global mode

which happens to all Flip customers regardless of what they have turned off.

2069 posts

Uber Geek
+1 received by user: 505


  Reply # 1461141 4-Jan-2016 20:10
Send private message

If it's not the safe mode thing, it could be something left over from global mode, as you need to block 8.8.8.8 and 8.8.4.4 for netflix/chromecast to work when faking country

20444 posts

Uber Geek
+1 received by user: 3904

Trusted
Subscriber

  Reply # 1461143 4-Jan-2016 20:12
3 people support this post
Send private message

So if your ISP sneakily redirects traffic its ok, but if someone else does it then its hacking and wrong? Ok. Good to know I should take flip off the list for ISPs to consider.




Richard rich.ms

 1 | 2
View this topic in a long page with up to 500 replies per page Create new topic



Twitter »

Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:





News »

UAV Traffic Management Trial launching today in New Zealand
Posted 12-Dec-2017 16:06


UFB connections pass 460,000
Posted 11-Dec-2017 11:26


The Warehouse Group to adopt IBM Cloud to support digital transformation
Posted 11-Dec-2017 11:22


Dimension Data peeks into digital business 2018
Posted 11-Dec-2017 10:55


2018 Cyber Security Predictions
Posted 7-Dec-2017 14:55


Global Govtech Accelerator to drive public sector innovation in Wellington
Posted 7-Dec-2017 11:21


Stuff Pix media strategy a new direction
Posted 7-Dec-2017 09:37


Digital transformation is dead
Posted 7-Dec-2017 09:31


Fake news and cyber security
Posted 7-Dec-2017 09:27


Dimension Data New Zealand strengthens cybersecurity practice
Posted 5-Dec-2017 20:27


Epson NZ launches new Expression Premium Photo range
Posted 5-Dec-2017 20:26


Eventbrite and Twickets launch integration partnership in Australia and New Zealand
Posted 5-Dec-2017 20:23


New Fujifilm macro lens lands in New Zealand
Posted 5-Dec-2017 20:16


Cyber security not being taken seriously enough
Posted 5-Dec-2017 20:13


Sony commences Android 8.0 Oreo rollout in New Zealand
Posted 5-Dec-2017 20:08



Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.